Crob FTP Server 3.6.1 - Remote Stack Overflow

Crob FTP Server 3.6.1 - Remote Stack Overflow / CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic LSS Security / http://security.lss.hr / include include include pragma comment lib,"ws232" char fzzrecv int sock...

fusion_v3.6.1_exploit.txt

? $copyr = " !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! PRIVATE !!! oooo...oooo.oooooooo8.ooooooooooo .8888o..88.888........88..888..88 .88.888o88..888oooooo.....888 .88...8888.........888....888 o88o....88.o88oooo888....o888o Network security team nst.void.ru Title: Fusion News v3.6.1...

CVE-2004-1307

Integer overflow in the TIFFFetchStripThing function in tifdirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overfl...

BlackJumboDog contains buffer overflow vulnerability

Overview BlackJumboDog fails to verify the length of several FTP commands, creating a buffer overflow vulnerability. Exploitation of this vulnerability may result in code execution on the target system with privileges of the FTP service. Description BlackJumboDog is a multi-function server for...

Fusionphp Fusion News 3.33.6 - Administrator Command Execution

Fusionphp Fusion News 3.33.6 - Administrator Command Execution source: https://www.securityfocus.com/bid/10836/info It is reported that Fusion News is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to...

Cisco VPN Concentrator 3000 ISAKMP DoS details

Hi list, the subject says it all. I would like to share the details of the Cisco VPN Concentrator 3000 ISAKMP packet parsing vulnerability mentioned at http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml The bug affects all software versions including 3.6.0 and I hope everyone got...

CVE-2001-0097

The CVE-2001-0097 entry concerns the Web interface of Infinite Interchange 3.6.1, where remote attackers can trigger a denial-of-service (application crash) by sending a large POST request. The available sources confirm the vulnerable component is the Web interface, and the impact is a partial av...